diff options
| author |   Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com> | 2021-09-02 23:13:06 -0400 |
|---|---|---|
| committer |   Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2021-09-03 16:33:10 -0700 |
| commit | 49d8a5606428ca0962d09050a5af81461ff90fbb (patch) | |
| tree | 698d6a3a5bbd7dec1c3011657c0d63b8fb4d8052 /include/net/bluetooth/hci_core.h | |
| parent | Bluetooth: call sock_hold earlier in sco_conn_del (diff) | |
| download | linux-dev-49d8a5606428ca0962d09050a5af81461ff90fbb.tar.xz linux-dev-49d8a5606428ca0962d09050a5af81461ff90fbb.zip | |
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'include/net/bluetooth/hci_core.h')
0 files changed, 0 insertions, 0 deletions